CVE-2009-2935

NameCVE-2009-2935
DescriptionGoogle V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
chromium-browsersource(unstable)(not affected)
libv8source(unstable)1.3.11+dfsg-1
webkitsource(unstable)(not affected)

Notes

- chromium-browser <not-affected> (Only 2.x is affected)
- webkit <not-affected> (libv8 issue)

Search for package or bug name: Reporting problems